RESEARCHERS HACK SOURCE CODE FROM GOOGLE GEMINI

Summary from the TLDR InfoSec newsletter

As part of Google's bugSWAT event, a group of security researchers managed to exfiltrate a sensitive binary from Gemini's Python Sandbox. The researchers first discovered that the sandbox provides full access to the os library which allowed them to map the sandbox's filesystem and locate the /usr/bin/entry/entry_point binary which they exfiltrated by returning 10MB chunks of base64 encoded data to the frontend. After reassembling it, the researchers found source code for the sandbox's Python interpreter and protobufs that describe how sensitive data is classified, handled, and transmitted within Google.